[strongSwan] VPN Suddenly Stopped Forwarding Internet
brian.g.colby at gmail.com
brian.g.colby at gmail.com
Mon Aug 9 22:12:36 CEST 2021
Hi Jody,
I’m not sure what OS you’re running, but I know for me (CentOS 7) the issue was that IPv4 forwarding was turned off. If this is the same for you, you can temporarily turn it on using “echo 1 > /proc/sys/net/ipv4/ip_forward” or permanently by editing /etc/sysctl.conf and adding the line “net.ipv4.ip_forward = 1” (this requires a reboot). Hopefully this helps if it’s the same issue…
R/s,
Brian
From: Users <users-bounces at lists.strongswan.org> On Behalf Of Jody Whitesides
Sent: Monday, August 9, 2021 1:08 PM
To: users at lists.strongswan.org
Subject: Re: [strongSwan] VPN Suddenly Stopped Forwarding Internet
I’m still attempting to figure out why the VPN has stopped forwarding the internet to the connection. Previously posted the config. Was asked to post a tcpdump of the VPN connection.
I’ve tried deleting and reinstalling strongswan, that did not work. Hopefully someone can provide feedback about why this might has stopped allowing connection to the internet.
I’m still getting the same issue, I can connect to the VPN, but the server is not passing the internet to the connection. Here’s the output you asked for from the tcpdump while connected to the VPN and trying to get something from internet:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ipsec0, link-type RAW (Raw IP), capture size 262144 bytes
13:50:59.406376 IP 10.10.10.1.57966 > 172.98.193.62.53: 8427+ Type65? gateway.icloud.com <http://gateway.icloud.com> . (36)
13:50:59.406796 IP 10.10.10.1.62159 > 172.98.193.62.53: 42920+ A? gateway.icloud.com <http://gateway.icloud.com> . (36)
13:51:02.951937 IP 10.10.10.1.58732 > 172.98.193.62.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:02.952192 IP 10.10.10.1.57434 > 172.98.193.62.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:03.478390 IP 10.10.10.1.57966 > 172.98.193.62.53: 8427+ Type65? gateway.icloud.com <http://gateway.icloud.com> . (36)
13:51:03.478622 IP 10.10.10.1.62159 > 172.98.193.62.53: 42920+ A? gateway.icloud.com <http://gateway.icloud.com> . (36)
13:51:03.980445 IP 10.10.10.1.58732 > 172.98.193.62.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:03.985177 IP 10.10.10.1.57434 > 172.98.193.62.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:04.140439 IP 10.10.10.1.63123 > 172.98.193.62.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:05.181463 IP 10.10.10.1.63123 > 172.98.193.62.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:06.112572 IP 10.10.10.1.65155 > 45.76.254.23.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:06.112840 IP 10.10.10.1.60252 > 45.76.254.23.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:06.249622 IP 10.10.10.1.60106 > 45.76.254.23.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:07.095478 IP 10.10.10.1.65155 > 45.76.254.23.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:07.095763 IP 10.10.10.1.60252 > 45.76.254.23.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:07.215685 IP 10.10.10.1.60163 > 45.76.254.23.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:07.286721 IP 10.10.10.1.60106 > 45.76.254.23.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:07.882797 IP 10.10.10.1.53423 > 45.76.254.23.53: 40780+ A? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:07.887783 IP 10.10.10.1.52091 > 45.76.254.23.53: 49937+ A? www.apple.com <http://www.apple.com> . (31)
13:51:07.887906 IP 10.10.10.1.62202 > 45.76.254.23.53: 37900+ A? www.icloud.com <http://www.icloud.com> . (32)
13:51:07.888008 IP 10.10.10.1.56098 > 45.76.254.23.53: 31840+ A? apple.com <http://apple.com> . (27)
13:51:08.245855 IP 10.10.10.1.60163 > 45.76.254.23.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:09.126279 IP 10.10.10.1.58732 > 172.98.193.62.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:09.130885 IP 10.10.10.1.57434 > 172.98.193.62.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:09.317000 IP 10.10.10.1.62451 > 172.98.193.62.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:10.321293 IP 10.10.10.1.63123 > 172.98.193.62.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:10.321522 IP 10.10.10.1.62451 > 172.98.193.62.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:11.363481 IP 10.10.10.1.60950 > 45.76.254.23.53: 30887+ Type65? 37-courier.push.apple.com <http://37-courier.push.apple.com> . (43)
13:51:11.363734 IP 10.10.10.1.55821 > 45.76.254.23.53: 8969+ A? 37-courier.push.apple.com <http://37-courier.push.apple.com> . (43)
13:51:12.429460 IP 10.10.10.1.60106 > 45.76.254.23.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:13.316759 IP 10.10.10.1.58732 > 172.98.193.62.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:13.316998 IP 10.10.10.1.57434 > 172.98.193.62.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:14.429114 IP 10.10.10.1.63123 > 172.98.193.62.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:16.521598 IP 10.10.10.1.60106 > 45.76.254.23.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:21.711344 IP 10.10.10.1.65155 > 45.76.254.23.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:21.715898 IP 10.10.10.1.60252 > 45.76.254.23.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:22.555822 IP 10.10.10.1.60163 > 45.76.254.23.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:24.801215 IP 10.10.10.1.62451 > 172.98.193.62.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:36.211003 IP 10.10.10.1.63050 > 172.98.193.62.53: 56943+ Type65? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:36.211342 IP 10.10.10.1.53938 > 172.98.193.62.53: 30880+ A? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:37.263213 IP 10.10.10.1.63050 > 172.98.193.62.53: 56943+ Type65? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:37.263490 IP 10.10.10.1.53938 > 172.98.193.62.53: 30880+ A? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:37.591790 IP 10.10.10.1.54810 > 172.98.193.62.53: 40768+ A? instagram.com <http://instagram.com> . (31)
13:51:37.592031 IP 10.10.10.1.54371 > 172.98.193.62.53: 16393+ A? i.instagram.com <http://i.instagram.com> . (33)
13:51:37.597074 IP 10.10.10.1.61064 > 31.13.65.52.443: UDP, length 1232
13:51:37.602494 IP 10.10.10.1.61810 > 31.13.65.52.443: Flags [SEW], seq 80223417, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1608332012 ecr 0,sackOK,eol], length 0
13:51:37.670006 IP 10.10.10.1.61812 > 31.13.65.52.443: Flags [SEW], seq 3954648210, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3546653954 ecr 0,sackOK,eol], length 0
13:51:37.674794 IP 10.10.10.1.61814 > 31.13.65.52.443: Flags [SEW], seq 1849600753, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1548326461 ecr 0,sackOK,eol], length 0
13:51:37.708324 IP 10.10.10.1.61064 > 31.13.65.52.443: UDP, length 1232
13:51:37.930400 IP 10.10.10.1.61064 > 31.13.65.52.443: UDP, length 1232
13:51:38.341631 IP 10.10.10.1.61064 > 31.13.65.52.443: UDP, length 1232
13:51:38.357537 IP 10.10.10.1.65155 > 45.76.254.23.53: 12561+ Type65? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:38.357793 IP 10.10.10.1.60252 > 45.76.254.23.53: 51958+ A? metrics.icloud.com <http://metrics.icloud.com> . (36)
13:51:38.606545 IP 10.10.10.1.61810 > 31.13.65.52.443: Flags [S], seq 80223417, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1608333012 ecr 0,sackOK,eol], length 0
13:51:38.668875 IP 10.10.10.1.61816 > 31.13.65.52.443: Flags [SEW], seq 1157739767, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 929574270 ecr 0,sackOK,eol], length 0
13:51:38.675301 IP 10.10.10.1.61814 > 31.13.65.52.443: Flags [S], seq 1849600753, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1548327461 ecr 0,sackOK,eol], length 0
13:51:38.675509 IP 10.10.10.1.61812 > 31.13.65.52.443: Flags [S], seq 3954648210, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3546654954 ecr 0,sackOK,eol], length 0
13:51:38.740050 IP 10.10.10.1.60163 > 45.76.254.23.53: 14913+ Type65? p66-keyvalueservice.icloud.com <http://p66-keyvalueservice.icloud.com> . (48)
13:51:38.846747 IP 10.10.10.1.54810 > 172.98.193.62.53: 40768+ A? instagram.com <http://instagram.com> . (31)
13:51:38.846974 IP 10.10.10.1.54371 > 172.98.193.62.53: 16393+ A? i.instagram.com <http://i.instagram.com> . (33)
13:51:38.877618 IP 10.10.10.1.61818 > 31.13.65.3.443: Flags [SEW], seq 1519834258, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3201119012 ecr 0,sackOK,eol], length 0
13:51:38.888159 IP 10.10.10.1.62185 > 172.98.193.62.53: 28208+ Type65? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:38.892873 IP 10.10.10.1.54520 > 172.98.193.62.53: 47608+ A? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:38.897791 IP 10.10.10.1.61022 > 172.98.193.62.53: 1603+ A? edge-mqtt.facebook.com <http://edge-mqtt.facebook.com> . (40)
13:51:38.897917 IP 10.10.10.1.53574 > 172.98.193.62.53: 15229+ Type65? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:38.898049 IP 10.10.10.1.57161 > 172.98.193.62.53: 11418+ A? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:38.954061 IP 10.10.10.1.61820 > 31.13.65.52.443: Flags [SEW], seq 2311270535, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1749710121 ecr 0,sackOK,eol], length 0
13:51:39.019433 IP 10.10.10.1.61822 > 31.13.65.52.443: Flags [SEW], seq 2489548101, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1594743177 ecr 0,sackOK,eol], length 0
13:51:39.027538 IP 10.10.10.1.61824 > 31.13.65.52.443: Flags [SEW], seq 1580706155, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3674983651 ecr 0,sackOK,eol], length 0
13:51:39.041862 IP 10.10.10.1.61826 > 31.13.65.52.443: Flags [SEW], seq 2389005340, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 505183511 ecr 0,sackOK,eol], length 0
13:51:39.049925 IP 10.10.10.1.61828 > 31.13.65.52.443: Flags [SEW], seq 53018470, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 2725782903 ecr 0,sackOK,eol], length 0
13:51:39.059152 IP 10.10.10.1.61830 > 31.13.65.52.443: Flags [SEW], seq 2883479437, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1374480345 ecr 0,sackOK,eol], length 0
13:51:39.149828 IP 10.10.10.1.61064 > 31.13.65.52.443: UDP, length 1232
13:51:39.526429 IP 10.10.10.1.49714 > 45.76.254.23.53: 56943+ Type65? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:39.526654 IP 10.10.10.1.60510 > 45.76.254.23.53: 30880+ A? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:39.549132 IP 10.10.10.1.61832 > 31.13.65.52.443: Flags [SEW], seq 3550404919, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 22659559 ecr 0,sackOK,eol], length 0
13:51:39.554969 IP 10.10.10.1.61834 > 31.13.65.52.443: Flags [SEW], seq 4209030494, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3857750712 ecr 0,sackOK,eol], length 0
13:51:39.610840 IP 10.10.10.1.61810 > 31.13.65.52.443: Flags [S], seq 80223417, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1608334012 ecr 0,sackOK,eol], length 0
13:51:39.678659 IP 10.10.10.1.61816 > 31.13.65.52.443: Flags [S], seq 1157739767, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 929575271 ecr 0,sackOK,eol], length 0
13:51:39.683490 IP 10.10.10.1.61814 > 31.13.65.52.443: Flags [S], seq 1849600753, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1548328461 ecr 0,sackOK,eol], length 0
13:51:39.683644 IP 10.10.10.1.61812 > 31.13.65.52.443: Flags [S], seq 3954648210, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3546655954 ecr 0,sackOK,eol], length 0
13:51:39.887707 IP 10.10.10.1.61818 > 31.13.65.3.443: Flags [S], seq 1519834258, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3201120013 ecr 0,sackOK,eol], length 0
13:51:39.892482 IP 10.10.10.1.62185 > 172.98.193.62.53: 28208+ Type65? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:39.936543 IP 10.10.10.1.54520 > 172.98.193.62.53: 47608+ A? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:39.941502 IP 10.10.10.1.61022 > 172.98.193.62.53: 1603+ A? edge-mqtt.facebook.com <http://edge-mqtt.facebook.com> . (40)
13:51:39.941677 IP 10.10.10.1.53574 > 172.98.193.62.53: 15229+ Type65? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:39.941824 IP 10.10.10.1.57161 > 172.98.193.62.53: 11418+ A? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:39.962290 IP 10.10.10.1.61820 > 31.13.65.52.443: Flags [S], seq 2311270535, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1749711122 ecr 0,sackOK,eol], length 0
13:51:40.026044 IP 10.10.10.1.61822 > 31.13.65.52.443: Flags [S], seq 2489548101, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1594744178 ecr 0,sackOK,eol], length 0
13:51:40.034712 IP 10.10.10.1.61824 > 31.13.65.52.443: Flags [S], seq 1580706155, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3674984652 ecr 0,sackOK,eol], length 0
13:51:40.049076 IP 10.10.10.1.61826 > 31.13.65.52.443: Flags [S], seq 2389005340, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 505184512 ecr 0,sackOK,eol], length 0
13:51:40.054782 IP 10.10.10.1.61828 > 31.13.65.52.443: Flags [S], seq 53018470, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 2725783903 ecr 0,sackOK,eol], length 0
13:51:40.064682 IP 10.10.10.1.61830 > 31.13.65.52.443: Flags [S], seq 2883479437, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1374481345 ecr 0,sackOK,eol], length 0
13:51:40.550532 IP 10.10.10.1.61836 > 31.13.65.52.443: Flags [SEW], seq 2736795870, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3200573962 ecr 0,sackOK,eol], length 0
13:51:40.555843 IP 10.10.10.1.61832 > 31.13.65.52.443: Flags [S], seq 3550404919, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 22660559 ecr 0,sackOK,eol], length 0
13:51:40.560666 IP 10.10.10.1.61834 > 31.13.65.52.443: Flags [S], seq 4209030494, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3857751712 ecr 0,sackOK,eol], length 0
13:51:40.570377 IP 10.10.10.1.49714 > 45.76.254.23.53: 56943+ Type65? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:40.570526 IP 10.10.10.1.60510 > 45.76.254.23.53: 30880+ A? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:40.618525 IP 10.10.10.1.61810 > 31.13.65.52.443: Flags [S], seq 80223417, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1608335013 ecr 0,sackOK,eol], length 0
13:51:40.685578 IP 10.10.10.1.61816 > 31.13.65.52.443: Flags [S], seq 1157739767, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 929576272 ecr 0,sackOK,eol], length 0
13:51:40.690416 IP 10.10.10.1.61814 > 31.13.65.52.443: Flags [S], seq 1849600753, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1548329461 ecr 0,sackOK,eol], length 0
13:51:40.690566 IP 10.10.10.1.61812 > 31.13.65.52.443: Flags [S], seq 3954648210, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3546656954 ecr 0,sackOK,eol], length 0
13:51:40.773146 IP 10.10.10.1.61064 > 31.13.65.52.443: UDP, length 1232
13:51:40.894511 IP 10.10.10.1.61818 > 31.13.65.3.443: Flags [S], seq 1519834258, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3201121013 ecr 0,sackOK,eol], length 0
13:51:40.934575 IP 10.10.10.1.62451 > 172.98.193.62.53: 56782+ A? 32-courier.push.apple.com <http://32-courier.push.apple.com> . (43)
13:51:40.941032 IP 10.10.10.1.60405 > 45.76.254.23.53: 40768+ A? instagram.com <http://instagram.com> . (31)
13:51:40.941235 IP 10.10.10.1.50413 > 45.76.254.23.53: 16393+ A? i.instagram.com <http://i.instagram.com> . (33)
13:51:40.973214 IP 10.10.10.1.61820 > 31.13.65.52.443: Flags [S], seq 2311270535, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1749712123 ecr 0,sackOK,eol], length 0
13:51:41.035213 IP 10.10.10.1.61822 > 31.13.65.52.443: Flags [S], seq 2489548101, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1594745179 ecr 0,sackOK,eol], length 0
13:51:41.044004 IP 10.10.10.1.61824 > 31.13.65.52.443: Flags [S], seq 1580706155, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3674985653 ecr 0,sackOK,eol], length 0
13:51:41.057171 IP 10.10.10.1.61826 > 31.13.65.52.443: Flags [S], seq 2389005340, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 505185512 ecr 0,sackOK,eol], length 0
13:51:41.063685 IP 10.10.10.1.61828 > 31.13.65.52.443: Flags [S], seq 53018470, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 2725784903 ecr 0,sackOK,eol], length 0
13:51:41.072824 IP 10.10.10.1.61830 > 31.13.65.52.443: Flags [S], seq 2883479437, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1374482345 ecr 0,sackOK,eol], length 0
13:51:41.561415 IP 10.10.10.1.61836 > 31.13.65.52.443: Flags [S], seq 2736795870, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3200574962 ecr 0,sackOK,eol], length 0
13:51:41.567529 IP 10.10.10.1.61832 > 31.13.65.52.443: Flags [S], seq 3550404919, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 22661560 ecr 0,sackOK,eol], length 0
13:51:41.567687 IP 10.10.10.1.61834 > 31.13.65.52.443: Flags [S], seq 4209030494, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3857752712 ecr 0,sackOK,eol], length 0
13:51:41.625458 IP 10.10.10.1.61810 > 31.13.65.52.443: Flags [S], seq 80223417, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1608336013 ecr 0,sackOK,eol], length 0
13:51:41.693385 IP 10.10.10.1.61816 > 31.13.65.52.443: Flags [S], seq 1157739767, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 929577273 ecr 0,sackOK,eol], length 0
13:51:41.698205 IP 10.10.10.1.61814 > 31.13.65.52.443: Flags [S], seq 1849600753, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1548330461 ecr 0,sackOK,eol], length 0
13:51:41.698381 IP 10.10.10.1.61812 > 31.13.65.52.443: Flags [S], seq 3954648210, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3546657954 ecr 0,sackOK,eol], length 0
13:51:41.900971 IP 10.10.10.1.61818 > 31.13.65.3.443: Flags [S], seq 1519834258, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3201122014 ecr 0,sackOK,eol], length 0
13:51:41.976673 IP 10.10.10.1.61820 > 31.13.65.52.443: Flags [S], seq 2311270535, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1749713124 ecr 0,sackOK,eol], length 0
13:51:41.984157 IP 10.10.10.1.62034 > 45.76.254.23.53: 28208+ Type65? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:41.989552 IP 10.10.10.1.60405 > 45.76.254.23.53: 40768+ A? instagram.com <http://instagram.com> . (31)
13:51:41.989719 IP 10.10.10.1.50413 > 45.76.254.23.53: 16393+ A? i.instagram.com <http://i.instagram.com> . (33)
13:51:41.989833 IP 10.10.10.1.63780 > 45.76.254.23.53: 47608+ A? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:41.989980 IP 10.10.10.1.60702 > 45.76.254.23.53: 1603+ A? edge-mqtt.facebook.com <http://edge-mqtt.facebook.com> . (40)
13:51:41.990112 IP 10.10.10.1.50378 > 45.76.254.23.53: 15229+ Type65? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:41.990211 IP 10.10.10.1.50996 > 45.76.254.23.53: 11418+ A? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:42.041693 IP 10.10.10.1.61822 > 31.13.65.52.443: Flags [S], seq 2489548101, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1594746180 ecr 0,sackOK,eol], length 0
13:51:42.049327 IP 10.10.10.1.61824 > 31.13.65.52.443: Flags [S], seq 1580706155, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3674986653 ecr 0,sackOK,eol], length 0
13:51:42.064133 IP 10.10.10.1.61826 > 31.13.65.52.443: Flags [S], seq 2389005340, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 505186513 ecr 0,sackOK,eol], length 0
13:51:42.068356 IP 10.10.10.1.61828 > 31.13.65.52.443: Flags [S], seq 53018470, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 2725785903 ecr 0,sackOK,eol], length 0
13:51:42.073749 IP 10.10.10.1.61830 > 31.13.65.52.443: Flags [S], seq 2883479437, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1374483345 ecr 0,sackOK,eol], length 0
13:51:42.563135 IP 10.10.10.1.61836 > 31.13.65.52.443: Flags [S], seq 2736795870, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3200575963 ecr 0,sackOK,eol], length 0
13:51:42.570185 IP 10.10.10.1.61832 > 31.13.65.52.443: Flags [S], seq 3550404919, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 22662560 ecr 0,sackOK,eol], length 0
13:51:42.574895 IP 10.10.10.1.61834 > 31.13.65.52.443: Flags [S], seq 4209030494, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3857753712 ecr 0,sackOK,eol], length 0
13:51:42.632581 IP 10.10.10.1.61810 > 31.13.65.52.443: Flags [S], seq 80223417, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1608337014 ecr 0,sackOK,eol], length 0
13:51:42.643302 IP 10.10.10.1.63050 > 172.98.193.62.53: 56943+ Type65? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:42.648192 IP 10.10.10.1.53938 > 172.98.193.62.53: 30880+ A? 27-courier.push.apple.com <http://27-courier.push.apple.com> . (43)
13:51:42.701035 IP 10.10.10.1.61816 > 31.13.65.52.443: Flags [S], seq 1157739767, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 929578274 ecr 0,sackOK,eol], length 0
13:51:42.705813 IP 10.10.10.1.61814 > 31.13.65.52.443: Flags [S], seq 1849600753, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1548331461 ecr 0,sackOK,eol], length 0
13:51:42.705958 IP 10.10.10.1.61812 > 31.13.65.52.443: Flags [S], seq 3954648210, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3546658954 ecr 0,sackOK,eol], length 0
13:51:42.909936 IP 10.10.10.1.61818 > 31.13.65.3.443: Flags [S], seq 1519834258, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3201123015 ecr 0,sackOK,eol], length 0
13:51:42.986583 IP 10.10.10.1.61820 > 31.13.65.52.443: Flags [S], seq 2311270535, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1749714124 ecr 0,sackOK,eol], length 0
13:51:43.037344 IP 10.10.10.1.62034 > 45.76.254.23.53: 28208+ Type65? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:43.037592 IP 10.10.10.1.63780 > 45.76.254.23.53: 47608+ A? graph.facebook.com <http://graph.facebook.com> . (36)
13:51:43.037695 IP 10.10.10.1.60702 > 45.76.254.23.53: 1603+ A? edge-mqtt.facebook.com <http://edge-mqtt.facebook.com> . (40)
13:51:43.037792 IP 10.10.10.1.50378 > 45.76.254.23.53: 15229+ Type65? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:43.041654 IP 10.10.10.1.50996 > 45.76.254.23.53: 11418+ A? bag.itunes.apple.com <http://bag.itunes.apple.com> . (38)
13:51:43.049468 IP 10.10.10.1.61822 > 31.13.65.52.443: Flags [S], seq 2489548101, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1594747181 ecr 0,sackOK,eol], length 0
13:51:43.058408 IP 10.10.10.1.61824 > 31.13.65.52.443: Flags [S], seq 1580706155, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3674987654 ecr 0,sackOK,eol], length 0
13:51:43.097067 IP 10.10.10.1.61826 > 31.13.65.52.443: Flags [S], seq 2389005340, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 505187514 ecr 0,sackOK,eol], length 0
13:51:43.097346 IP 10.10.10.1.61828 > 31.13.65.52.443: Flags [S], seq 53018470, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 2725786903 ecr 0,sackOK,eol], length 0
13:51:43.097465 IP 10.10.10.1.61830 > 31.13.65.52.443: Flags [S], seq 2883479437, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 1374484345 ecr 0,sackOK,eol], length 0
13:51:43.574713 IP 10.10.10.1.61836 > 31.13.65.52.443: Flags [S], seq 2736795870, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3200576963 ecr 0,sackOK,eol], length 0
13:51:43.579321 IP 10.10.10.1.61834 > 31.13.65.52.443: Flags [S], seq 4209030494, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3857754712 ecr 0,sackOK,eol], length 0
13:51:43.579470 IP 10.10.10.1.61832 > 31.13.65.52.443: Flags [S], seq 3550404919, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 22663561 ecr 0,sackOK,eol], length 0
13:51:43.706528 IP 10.10.10.1.61816 > 31.13.65.52.443: Flags [S], seq 1157739767, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 929579275 ecr 0,sackOK,eol], length 0
13:51:43.915063 IP 10.10.10.1.61818 > 31.13.65.3.443: Flags [S], seq 1519834258, win 65535, options [mss 1240,nop,wscale 5,nop,nop,TS val 3201124016 ecr 0,sackOK,eol], length 0
Thank you,
Jody
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20210809/fa7fa66c/attachment-0001.html>
More information about the Users
mailing list